✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
agents
cache
ci-cd
containers
devops
docker
+2 more
graphql
workflows
Summary
AI summaryUpdates v0.21.7 - 2026-06-17, What to do next?, and https://docs.dagger.io across a mixed release.
Full changelog
v0.21.7 - 2026-06-17
Changed
- Bump default CNI IP address pool size to reduce address exhaustion under high container concurrency. by @sipsma in https://github.com/dagger/dagger/pull/13394
- Bump Dang to v2.1.1, moving JSON encoding behind the
JSONnamespace (with a deprecated top-leveltoJSON) and picking up constructor scope and nullable input fixes. by @vito in https://github.com/dagger/dagger/pull/13482
Fixed
.envfile handling so non-matching variables are kept as hidden expansion context instead of being dropped, allowing later variables to expand against them. by @marcosnils in https://github.com/dagger/dagger/pull/13490- Filesync so syncing a re-included file under a gitignored directory (e.g.
foo/ignored with!foo/bar.txt) no longer fails withno such file or directory; ignored parent dirs are now created on demand for visible descendants. by @grouville in https://github.com/dagger/dagger/pull/13439 - A concurrent map panic during GC by guarding session client map iteration, preventing fatal
concurrent map iteration and map writecrashes. by @sipsma in https://github.com/dagger/dagger/pull/13474 - Go SDK codegen so SDK auth config is forwarded to typedef generation, allowing modules with private transitive Go dependencies to resolve during codegen. by @grouville in https://github.com/dagger/dagger/pull/13457
- Core enum handling to preserve conventional enum member names. by @shykes in https://github.com/dagger/dagger/pull/13435
- The Apple
containerdriver to honor the privileged option by granting all capabilities (--cap-add ALL), so the engine can bind-mount/etc/resolv.confon startup withcontainer1.0.0's reduced default capability set. by @eunomie in https://github.com/dagger/dagger/pull/13460 - Dang directive argument resolution so
@cache(and other directive) arguments resolve against the declaring type's file scope, fixingFunctionCachePolicy not found in enverrors in multi-file modules. by @vito in https://github.com/dagger/dagger/pull/13455 - The report-mode heartbeat so it waits for its goroutine to exit before final render, avoiding interleaved output. by @kpenfound in https://github.com/dagger/dagger/pull/13425
- Nullable result unwrapping for SDK input so nullable values are passed correctly into SDK functions. by @shykes in https://github.com/dagger/dagger/pull/13401
What to do next?
- Read the documentation
- Join our Discord server
- Follow us on Twitter
Breaking Changes
- JSON encoding moved behind the `JSON` namespace; top-level `toJSON` is deprecated (Dang v2.1.1).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About dagger
Automation engine to build, test and ship any codebase. Runs locally, in CI, or directly in the cloud
Related context
Related tools
Earlier breaking changes
- v0.21.0 Migrate caching to DagQL and remove the BuildKit solver backend.
Beta — feedback welcome: [email protected]